Live data from Hacker News

GitHub hands out your repo visitors IP like candy who ask for it politely

twitter.com

1–10 of 12 posts

Re: GitHub hands out your repo visitors IP like candy who ask for it politely

#5
post #4

Earlier quoted context omitted.

Given the partial IP address and request time, the ISP could identify the customer.

VPN and Tor Browser?

Let's not get so distracted that we forget the main point of the post: should GitHub be providing this information so readily?

Re: GitHub hands out your repo visitors IP like candy who ask for it politely

#6
post #4

Earlier quoted context omitted.

VPN and Tor Browser?

Let's not get so distracted that we forget the main point of the post: should GitHub be providing this information so readily?

You can just put a JPG hosted on your server in the readme and get their full IP.

Re: GitHub hands out your repo visitors IP like candy who ask for it politely

#8

Earlier quoted context omitted.

Let's not get so distracted that we forget the main point of the post: should GitHub be providing this information so readily?

You can just put a JPG hosted on your server in the readme and get their full IP.

Yes, and that is something that will always be possible between the author and the reader, but this is about a third party, GitHub, providing this information to a possible fourth party. That's what the Twitter post wanted to get across.

Re: GitHub hands out your repo visitors IP like candy who ask for it politely

#9

Earlier quoted context omitted.

You can just put a JPG hosted on your server in the readme and get their full IP.

Yes, and that is something that will always be possible between the author and the reader, but this is about a third party, GitHub, providing this information to a possible fourth party. That's what the Twitter post wanted to get across.

Oh right, I missed that because the post linked to the middle tweet in the thread.

Still doesn't sound too outrageous. At least, it's not unprecedented and is in line with the existing practices of companies responding to law enforcement requests.

Re: GitHub hands out your repo visitors IP like candy who ask for it politely

#10

Earlier quoted context omitted.

Let's not get so distracted that we forget the main point of the post: should GitHub be providing this information so readily?

You can just put a JPG hosted on your server in the readme and get their full IP.

Github proxies images so this shouldn't be possible https://github.blog/2014-01-28-proxying-user-images/
Post reply on HN